CSSM Privacy Policy
The Privacy Officer for CSSM Ministries is appointed by and accountable to the National Council. He/she is responsible for overall compliance with the Privacy Policy.
Each Branch Council appoints a Privacy Trustee who is responsible for executing compliance to the Code within their jurisdiction. Branch Trustees are accountable to the Privacy Officer.
Personal information collected by any part of the organization shall be for a specific, clearly identified purpose.
Personal information shall be obtained only with the full consent of the individual (or, in the case of a minor, their parent or legal guardian).
Personal information shall be retained only as long as is necessary to fulfill the stated purpose, after which it is to be destroyed.
Personal information is to be used and disclosed only in accordance with the reason(s) stated to the individual at time of collection. New consent must be obtained for new uses.
Except when required by law, personal information is not to be disclosed to a third party without consent.
Mailing lists (or segments thereof) are not to be sold, traded, given to, or shared with any organization or individual.
When personal information on paper is disposed of, it shall be by shredding or burning.
Personal information shall not be disclosed to churches, college, businesses, or other organizations without the express consent of the individual or, in the case of a minor, their parent or legal
guardian.
Information shall be kept current, complete, and accurate.
Utmost care shall be taken to protect personal information against loss, theft, unauthorized disclosure, copying, use or alteration. Filing cabinets, drawers, and other places of storage are to be
locked and accessible only to authorized personnel. CDs, floppies, etc., are to be stored under lock and key. When stored on a computer hard drive, personal information shall be protected by the use of passwords.
A log shall be attached to each file containing personal information; when such file is accessed, a record shall be kept as to what information was disclosed, and to whom.
Individuals are to be given access to their personal information upon request.
All complaints received in relation to CSSM’s handling of personal information must be referred to the Privacy Officer.
All CSSM staff and board members are to be apprised of the Privacy Act and shall receive appropriate training on privacy issues and their individual responsibilities under CSSM’s Privacy Policy.
